Re: rasops(9): Use proper RGB values for the ANSI color palette

2017-01-07 Thread Mark Kettenis
> Date: Sat, 7 Jan 2017 12:20:06 + > From: Visa Hankala > > On Sat, Jan 07, 2017 at 12:23:31AM +0100, Frederic Cambus wrote: > > Hi tech@, > > > > Here is a diff to use proper RGB values for the ANSI color palette in > > rasops(9). > > > > Comments? OK? > > I prefer the

OpenBSD kernel L1 to L4 transmission and Qemu debug problem

2017-01-07 Thread Behzat Erte
Hello everyone, I've just started investigating OpenBSD kernel and I'm interested in networking stuff. Actually I'm not sure this mail group is a correct place or not but I've to need some information about L1 to L4 packet transmission (incoming/outgoing). I've created debug environment for

Re: Display color depth when attaching inteldrm and radeondrm

2017-01-07 Thread Mark Kettenis
> Date: Fri, 6 Jan 2017 12:42:13 +0100 > From: Frederic Cambus > > Hi tech@, > > Here's a diff to display color depth alongside resolution when attaching > inteldrm and radeondrm, using the same scheme as efifb(4). This is the > first step in trying to have all frame buffer

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Theo de Raadt
> On Fri, Jan 06, 2017 at 10:48:37AM -0500, RD Thrush wrote: > > On 01/06/17 06:28, Stuart Henderson wrote: > > > Related to this (and particularly thinking about autoinstalls), > > > would it make sense to allow explicit protocols in the hostname? > > > > > > some.host -> https with http

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Bob Beck
On Fri, Jan 06, 2017 at 10:48:37AM -0500, RD Thrush wrote: > On 01/06/17 06:28, Stuart Henderson wrote: > > Related to this (and particularly thinking about autoinstalls), > > would it make sense to allow explicit protocols in the hostname? > > > > some.host -> https with http fallback > >

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread RD Thrush
On 01/07/17 16:13, Bob Beck wrote: > > On Fri, Jan 06, 2017 at 10:48:37AM -0500, RD Thrush wrote: >> On 01/06/17 06:28, Stuart Henderson wrote: >>> Related to this (and particularly thinking about autoinstalls), >>> would it make sense to allow explicit protocols in the hostname? >>> >>>

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Theo de Raadt
> What workarounds would be reasonable and approriate? and does it > make sense for OpenBSD to support such scenarios out-of-the-box to > promote wider adoption of better software? If you want buy the OpenBSD-installer-for-drones, contact me offline. That featureset didn't make it into the free

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Bob Beck
On Sat, Jan 07, 2017 at 03:52:04PM -0700, Theo de Raadt wrote: > > What workarounds would be reasonable and approriate? and does it > > make sense for OpenBSD to support such scenarios out-of-the-box to > > promote wider adoption of better software? > > If you want buy the

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Theo de Raadt
> On Sat, Jan 07, 2017 at 03:52:04PM -0700, Theo de Raadt wrote: > > > What workarounds would be reasonable and approriate? and does it > > > make sense for OpenBSD to support such scenarios out-of-the-box to > > > promote wider adoption of better software? > > > > If you want buy the

Re: E5v4 pciids

2017-01-07 Thread Mike Larkin
On Thu, Dec 15, 2016 at 10:46:39AM +0100, Hrvoje Popovski wrote: > Hi all, > > patch in attachment adds some E5v4 pciids that i'm seeing in supermicro > 1018R-WR box with E5-1650 v4. > Thanks, committed.

Move auth_approval in su.c before fork is lost due to pledge?

2017-01-07 Thread Andy Bradford
Hello, I noticed that my locate.database wasn't being updated: Rebuilding locate database: Abort trap Not installing locate database; zero size >From the following: echo "${UPDATEDB} --fcodes=- --tmpdir=${TMPDIR:-/tmp}" | \ nice -5 su -m nobody 2>/dev/null

Fix busy-looping in netcat's TLS handshaking

2017-01-07 Thread Shuo Chen
When doing TLS handshaking, netcat does it in a busy-looping way, because the socket fd is set to non-blocking. do { if ((i = tls_handshake(tls_ctx)) == -1) errx(1, "tls handshake failed (%s)", tls_error(tls_ctx));

gzip keep input files patch

2017-01-07 Thread frantisek holop
hello, here is a simple patch to add -k (keep) flag to gzip/compress. freebsd has it, netbsd has it (although omitted from the manpages), linux has it. my use case is automating gzip compression for nginx's ngx_http_gzip_static_module that can serve precompressed files from the same directory,

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Jacob L. Leifman
On 7 Jan 2017 at 15:28, Theo de Raadt wrote: > > On Fri, Jan 06, 2017 at 10:48:37AM -0500, RD Thrush wrote: > > > On 01/06/17 06:28, Stuart Henderson wrote: > > > > Related to this (and particularly thinking about autoinstalls), > > > > would it make sense to allow explicit protocols in the

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Theo de Raadt
> > And we should also ask a firmware question? > > > > Nope. I don't think we should bend over backwards for people doing > > strange things. They are on their own. > > > > Most of the time I agree with this particular attitude and it is indeed > appropriate for the OP case. However, there

Re: Allow install from https server w/ self signed cert

2017-01-07 Thread Bob Beck
On Sat, Jan 07, 2017 at 05:42:24PM -0500, Jacob L. Leifman wrote: > Most of the time I agree with this particular attitude and it is indeed > appropriate for the OP case. However, there some major networks such as > various governments (or for example .mil) that do not participate in > the

OpenBGPd: expand rib list

2017-01-07 Thread Denis Fondras
Hello, Here is a patch to expand RIB names in rules. When playing with multi-RIBs, it allows to simplify ruleset. Ex : # cat /etc/bgpd.conf [...] peer_ribs = "{ m1, m2, m3 }" deny rib m2 from any allow rib $peer_ribs from any prefix { 2001:db8:1::/48, 2001:db8:2::/48 } # bgpd -dnv [...] deny

tcpdump: decode BGP Administrative Shutdown Communication

2017-01-07 Thread Job Snijders
This patch adds support to tcpdump(8) to decode BGP Administrative Shutdown Communications in human readable form. The draft-ietf-idr-shutdown (https://tools.ietf.org/html/draft-ietf-idr-shutdown) specification documents a mechanism to transmit a short freeform UTF-8 message as part of a BGP

Re: find -delete

2017-01-07 Thread Mark Kettenis
> Date: Sat, 7 Jan 2017 13:15:05 + > From: Stuart Henderson > > On 2017/01/07 11:32, Marc Espie wrote: > > On Tue, Jan 03, 2017 at 11:15:39PM +0100, Mark Kettenis wrote: > > > > From: "Ted Unangst" > > > > Date: Tue, 03 Jan 2017 16:39:48 -0500 > >

Re: rasops(9): Use proper RGB values for the ANSI color palette

2017-01-07 Thread Visa Hankala
On Sat, Jan 07, 2017 at 12:23:31AM +0100, Frederic Cambus wrote: > Hi tech@, > > Here is a diff to use proper RGB values for the ANSI color palette in > rasops(9). > > Comments? OK? I prefer the old palette because its contrast is higher. > Index: sys/dev/rasops/rasops.c >

Re: find -delete

2017-01-07 Thread Stuart Henderson
On 2017/01/07 11:32, Marc Espie wrote: > On Tue, Jan 03, 2017 at 11:15:39PM +0100, Mark Kettenis wrote: > > > From: "Ted Unangst" > > > Date: Tue, 03 Jan 2017 16:39:48 -0500 > > > > > > I copied this straight from freebsd. Not fixed, but feel free to correct > > > as > > >

Re: find -delete

2017-01-07 Thread Marc Espie
On Tue, Jan 03, 2017 at 11:15:39PM +0100, Mark Kettenis wrote: > > From: "Ted Unangst" > > Date: Tue, 03 Jan 2017 16:39:48 -0500 > > > > I copied this straight from freebsd. Not fixed, but feel free to correct as > > desired. > > > > This adds a third example showing